Index

_

__del__() (workbench.server.dir_watcher.DirWatcher method) (workbench.workers.pcap_bro.PcapBro method) (workbench.workers.pcap_graph.PcapGraph method) (workbench.workers.pcap_http_graph.PcapHTTPGraph method) (workbench.workers.pe_deep_sim.PEDeepSim method) (workbench.workers.unzip.Unzip method) (workbench.workers.view.View method) (workbench.workers.view_deep.ViewDeep method) (workbench.workers.view_pcap.ViewPcap method) (workbench.workers.view_pcap_deep.ViewPcapDeep method) (workbench.workers.view_zip.ViewZip method) (workbench.workers.view_zip_deep.ViewZipDeep method)

A

add_it() (in module workbench.clients.pe_sim_graph) add_node() (workbench.server.neo_db.NeoDB method) (workbench.server.neo_db.NeoDBStub method) (workbench.server.workbench_server.WorkBench method) (workbench.workers.pcap_graph.PcapGraph method) (workbench.workers.pcap_http_graph.PcapHTTPGraph method) add_plugin() (workbench.server.plugin_manager.PluginManager method) add_rel() (workbench.server.neo_db.NeoDB method) (workbench.server.neo_db.NeoDBStub method) (workbench.server.workbench_server.WorkBench method) (workbench.workers.pcap_graph.PcapGraph method) (workbench.workers.pcap_http_graph.PcapHTTPGraph method)

add_tags() (workbench.server.workbench_server.WorkBench method) all_files_in_directory() (in module workbench.clients.upload_dir) all_sample_md5s() (workbench.server.data_store.DataStore method)

B

BroLogReader (class in workbench.server.bro.bro_log_reader)

C

check_anti_debug_imports() (workbench.workers.pe_indicators.PEIndicators method) check_checksum_is_zero() (workbench.workers.pe_indicators.PEIndicators method) check_checksum_mismatch() (workbench.workers.pe_indicators.PEIndicators method) check_com_service_imports() (workbench.workers.pe_indicators.PEIndicators method) check_communication_imports() (workbench.workers.pe_indicators.PEIndicators method) check_corrupted_imports() (workbench.workers.pe_indicators.PEIndicators method) check_crypto_imports() (workbench.workers.pe_indicators.PEIndicators method) check_dll_with_no_exports() (workbench.workers.pe_indicators.PEIndicators method) check_elevating_privs_imports() (workbench.workers.pe_indicators.PEIndicators method) check_empty_section_name() (workbench.workers.pe_indicators.PEIndicators method) check_exports() (workbench.workers.pe_indicators.PEIndicators method) check_image_size_incorrect() (workbench.workers.pe_indicators.PEIndicators method) check_invalid_entry_point() (workbench.workers.pe_indicators.PEIndicators method) check_keylogging_imports() (workbench.workers.pe_indicators.PEIndicators method) check_nonstandard_section_name() (workbench.workers.pe_indicators.PEIndicators method) check_overlapping_headers() (workbench.workers.pe_indicators.PEIndicators method) check_process_manipulation() (workbench.workers.pe_indicators.PEIndicators method)

check_process_spawn() (workbench.workers.pe_indicators.PEIndicators method) check_section_oversized() (workbench.workers.pe_indicators.PEIndicators method) check_section_unaligned() (workbench.workers.pe_indicators.PEIndicators method) check_stealth_load() (workbench.workers.pe_indicators.PEIndicators method) check_system_integrity_imports() (workbench.workers.pe_indicators.PEIndicators method) check_system_probe_imports() (workbench.workers.pe_indicators.PEIndicators method) check_system_state_imports() (workbench.workers.pe_indicators.PEIndicators method) chunks() (in module workbench.clients.upload_file_chunks) clean_for_serialization() (workbench.server.data_store.DataStore method) clean_for_storage() (workbench.server.data_store.DataStore method) clear_db() (workbench.server.data_store.DataStore method) (workbench.server.neo_db.NeoDB method) (workbench.server.neo_db.NeoDBStub method) (workbench.server.workbench_server.WorkBench method) clear_graph_db() (workbench.server.workbench_server.WorkBench method) clear_worker_output() (workbench.server.data_store.DataStore method) (workbench.server.workbench_server.WorkBench method) combine_samples() (workbench.server.workbench_server.WorkBench method) conn_log_graph() (workbench.workers.pcap_graph.PcapGraph method) convert_to_ascii_null_term() (in module workbench.workers.pe_features) (in module workbench.workers.pe_indicators) convert_to_utf8() (in module workbench.workers.pe_features)

D

data_to_unicode() (workbench.server.data_store.DataStore method) DataStore (class in workbench.server.data_store) dependencies (workbench.workers.evel_knievel_all.EvelKnievelAll attribute) (workbench.workers.evel_knievel_key.EvelKnievelKey attribute) (workbench.workers.evel_knievel_type.EvelKnievelType attribute) (workbench.workers.help_base.HelpBase attribute) (workbench.workers.help_formatter.HelpFormatter attribute) (workbench.workers.json_meta.JSONMetaData attribute) (workbench.workers.log_meta.LogMetaData attribute) (workbench.workers.meta.MetaData attribute) (workbench.workers.meta_deep.MetaDeepData attribute) (workbench.workers.pcap_bro.PcapBro attribute) (workbench.workers.pcap_graph.PcapGraph attribute) (workbench.workers.pcap_http_graph.PcapHTTPGraph attribute) (workbench.workers.pe_classifier.PEClassifier attribute) (workbench.workers.pe_deep_sim.PEDeepSim attribute) (workbench.workers.pe_features.PEFileWorker attribute) (workbench.workers.pe_indicators.PEIndicators attribute) (workbench.workers.pe_peid.PEIDWorker attribute) (workbench.workers.strings.Strings attribute) (workbench.workers.swf_meta.SWFMeta attribute) (workbench.workers.unzip.Unzip attribute) (workbench.workers.url.URLS attribute) (workbench.workers.view.View attribute) (workbench.workers.view_customer.ViewCustomer attribute) (workbench.workers.view_deep.ViewDeep attribute) (workbench.workers.view_log_meta.ViewLogMeta attribute) (workbench.workers.view_memory.ViewMemory attribute) (workbench.workers.view_memory_deep.ViewMemoryDeep attribute) (workbench.workers.view_pcap.ViewPcap attribute) (workbench.workers.view_pcap_deep.ViewPcapDeep attribute) (workbench.workers.view_pdf.ViewPDF attribute) (workbench.workers.view_pdf_deep.ViewPDFDeep attribute) (workbench.workers.view_pe.ViewPE attribute) (workbench.workers.view_pe_deep.ViewPEDeep attribute) (workbench.workers.view_swf.ViewSWF attribute) (workbench.workers.view_swf_deep.ViewSWFDeep attribute) (workbench.workers.view_zip.ViewZip attribute) (workbench.workers.view_zip_deep.ViewZipDeep attribute) (workbench.workers.vt_query.VTQuery attribute) (workbench.workers.yara_sigs.YaraSigs attribute)

DirWatcher (class in workbench.server.dir_watcher) dns_log_graph() (workbench.workers.pcap_graph.PcapGraph method)

E

ELSIndexer (class in workbench.server.els_indexer) ELSStubIndexer (class in workbench.server.els_indexer) EvelKnievelAll (class in workbench.workers.evel_knievel_all) EvelKnievelKey (class in workbench.workers.evel_knievel_key)

EvelKnievelType (class in workbench.workers.evel_knievel_type) execute() (workbench.workers.evel_knievel_all.EvelKnievelAll method) (workbench.workers.evel_knievel_key.EvelKnievelKey method) (workbench.workers.evel_knievel_type.EvelKnievelType method) (workbench.workers.help_base.HelpBase method) (workbench.workers.help_formatter.HelpFormatter method) (workbench.workers.json_meta.JSONMetaData method) (workbench.workers.log_meta.LogMetaData method) (workbench.workers.meta.MetaData method) (workbench.workers.meta_deep.MetaDeepData method) (workbench.workers.pcap_bro.PcapBro method) (workbench.workers.pcap_graph.PcapGraph method) (workbench.workers.pcap_http_graph.PcapHTTPGraph method) (workbench.workers.pe_classifier.PEClassifier method) (workbench.workers.pe_deep_sim.PEDeepSim method) (workbench.workers.pe_features.PEFileWorker method) (workbench.workers.pe_indicators.PEIndicators method) (workbench.workers.pe_peid.PEIDWorker method) (workbench.workers.strings.Strings method) (workbench.workers.swf_meta.SWFMeta method) (workbench.workers.unzip.Unzip method) (workbench.workers.url.URLS method) (workbench.workers.view.View method) (workbench.workers.view_customer.ViewCustomer method) (workbench.workers.view_deep.ViewDeep method) (workbench.workers.view_log_meta.ViewLogMeta method) (workbench.workers.view_memory.ViewMemory method) (workbench.workers.view_memory_deep.ViewMemoryDeep method) (workbench.workers.view_pcap.ViewPcap method) (workbench.workers.view_pcap_deep.ViewPcapDeep method) (workbench.workers.view_pdf.ViewPDF method) (workbench.workers.view_pdf_deep.ViewPDFDeep method) (workbench.workers.view_pe.ViewPE method) (workbench.workers.view_pe_deep.ViewPEDeep method) (workbench.workers.view_swf.ViewSWF method) (workbench.workers.view_swf_deep.ViewSWFDeep method) (workbench.workers.view_zip.ViewZip method) (workbench.workers.view_zip_deep.ViewZipDeep method) (workbench.workers.vt_query.VTQuery method) (workbench.workers.yara_sigs.YaraSigs method) expire_data() (workbench.server.data_store.DataStore method) extract_features_using_pefile() (workbench.workers.pe_features.PEFileWorker method)

F

file_to_pid() (workbench.workers.view_memory.ViewMemory static method)

files_log_graph() (workbench.workers.pcap_graph.PcapGraph method) (workbench.workers.pcap_http_graph.PcapHTTPGraph method)

G

generate_sample_set() (workbench.server.workbench_server.WorkBench method) get_all_tags() (workbench.server.workbench_server.WorkBench method) get_dataframe() (workbench.server.workbench_server.WorkBench method) get_datastore_uri() (workbench.server.workbench_server.WorkBench method) get_dense_features() (workbench.workers.pe_features.PEFileWorker method) get_full_md5() (workbench.server.data_store.DataStore method) get_info() (workbench.server.workbench_server.WorkBench method) get_peid_db() (in module workbench.workers.pe_peid) get_rules_from_disk() (in module workbench.workers.yara_sigs) get_sample() (workbench.server.data_store.DataStore method) (workbench.server.workbench_server.WorkBench method)

get_sample_set() (workbench.server.workbench_server.WorkBench method) get_sample_window() (workbench.server.data_store.DataStore method) (workbench.server.workbench_server.WorkBench method) get_sparse_features() (workbench.workers.pe_features.PEFileWorker method) get_tags() (workbench.server.workbench_server.WorkBench method) get_uri() (workbench.server.data_store.DataStore method) get_work_results() (workbench.server.data_store.DataStore method) goto_temp_directory() (workbench.workers.pcap_bro.PcapBro method) grab_server_args() (in module workbench.clients.client_helper) gsleep() (in module workbench.workers.pcap_bro) (in module workbench.workers.pcap_graph) (in module workbench.workers.pcap_http_graph) guess_type_tag() (workbench.server.workbench_server.WorkBench method)

H

has_node() (workbench.server.neo_db.NeoDB method) (workbench.server.neo_db.NeoDBStub method) (workbench.server.workbench_server.WorkBench method) has_sample() (workbench.server.data_store.DataStore method) (workbench.server.workbench_server.WorkBench method) help() (workbench.server.workbench_server.WorkBench method)

HelpBase (class in workbench.workers.help_base) HelpFormatter (class in workbench.workers.help_formatter) http_log_graph() (workbench.workers.pcap_graph.PcapGraph method) (workbench.workers.pcap_http_graph.PcapHTTPGraph method)

I

index_data() (workbench.server.els_indexer.ELSIndexer method) (workbench.server.els_indexer.ELSStubIndexer method) index_sample() (workbench.server.workbench_server.WorkBench method)

index_worker_output() (workbench.server.workbench_server.WorkBench method) is_sample_set() (workbench.server.workbench_server.WorkBench method)

J

jaccard_sim() (in module workbench.clients.pe_sim_graph) jaccard_sims() (in module workbench.clients.pe_sim_graph)

JSONMetaData (class in workbench.workers.json_meta)

L

list_all_commands() (workbench.server.workbench_server.WorkBench method) list_all_workers() (workbench.server.workbench_server.WorkBench method)

load_all_plugins() (workbench.server.plugin_manager.PluginManager method) LogMetaData (class in workbench.workers.log_meta)

M

message() (workbench.server.workbench_server.WorkBench.DataNotFound static method) MetaData (class in workbench.workers.meta)

MetaDeepData (class in workbench.workers.meta_deep)

N

NeoDB (class in workbench.server.neo_db)

NeoDBStub (class in workbench.server.neo_db)

O

on_created() (workbench.server.plugin_manager.PluginManager method) on_deleted() (workbench.server.plugin_manager.PluginManager method)

on_modified() (workbench.server.plugin_manager.PluginManager method) open_using_pefile() (workbench.workers.pe_features.PEFileWorker static method)

P

PcapBro (class in workbench.workers.pcap_bro) PcapGraph (class in workbench.workers.pcap_graph) PcapHTTPGraph (class in workbench.workers.pcap_http_graph) PEClassifier (class in workbench.workers.pe_classifier) PEDeepSim (class in workbench.workers.pe_deep_sim) PEFileWorker (class in workbench.workers.pe_features) peid_features() (workbench.workers.pe_peid.PEIDWorker method)

PEIDWorker (class in workbench.workers.pe_peid) PEIndicators (class in workbench.workers.pe_indicators) periodic_ops() (workbench.server.data_store.DataStore method) plugin_class_validation() (workbench.server.plugin_manager.PluginManager method) plugin_test_validation() (workbench.server.plugin_manager.PluginManager method) PluginManager (class in workbench.server.plugin_manager)

R

read_log() (workbench.server.bro.bro_log_reader.BroLogReader method) register_callbacks() (workbench.server.dir_watcher.DirWatcher method) remove_plugin() (workbench.server.plugin_manager.PluginManager method)

remove_sample() (workbench.server.data_store.DataStore method) (workbench.server.workbench_server.WorkBench method) run() (in module workbench.clients.customer_report) (in module workbench.clients.help_client) (in module workbench.clients.log_meta_stream) (in module workbench.clients.pcap_bro_indexer) (in module workbench.clients.pcap_bro_raw) (in module workbench.clients.pcap_bro_urls) (in module workbench.clients.pcap_bro_view) (in module workbench.clients.pcap_meta) (in module workbench.clients.pcap_meta_indexer) (in module workbench.clients.pe_indexer) (in module workbench.clients.pe_peid) (in module workbench.clients.pe_sim_graph) (in module workbench.clients.short_md5s) (in module workbench.clients.upload_dir) (in module workbench.clients.upload_file) (in module workbench.clients.upload_file_chunks) (in module workbench.clients.zip_file_extraction) (in module workbench.server.workbench_server)

S

safe_get() (workbench.workers.view_pe.ViewPE static method) sample_set_input (workbench.workers.pcap_bro.PcapBro attribute) sample_storage_size() (workbench.server.data_store.DataStore method) search() (workbench.server.els_indexer.ELSIndexer method) (workbench.server.els_indexer.ELSStubIndexer method) search_index() (workbench.server.workbench_server.WorkBench method) set_dense_features() (workbench.workers.pe_features.PEFileWorker method) set_sparse_features() (workbench.workers.pe_features.PEFileWorker method) set_tags() (workbench.server.workbench_server.WorkBench method) set_work_request (workbench.server.workbench_server.WorkBench attribute) setup_pcap_inputs() (workbench.workers.pcap_bro.PcapBro method)

start_monitoring() (workbench.server.dir_watcher.DirWatcher method) store_info() (workbench.server.workbench_server.WorkBench method) store_sample() (workbench.server.data_store.DataStore method) (workbench.server.workbench_server.WorkBench method) store_sample_set() (workbench.server.workbench_server.WorkBench method) store_work_results() (workbench.server.data_store.DataStore method) stream_sample (workbench.server.workbench_server.WorkBench attribute) stream_sample_set (workbench.server.workbench_server.WorkBench attribute) Strings (class in workbench.workers.strings) subprocess_manager() (workbench.workers.pcap_bro.PcapBro method) SWFMeta (class in workbench.workers.swf_meta)

T

tag_match() (workbench.server.data_store.DataStore method) tags_all() (workbench.server.data_store.DataStore method) test() (in module workbench.clients.customer_report) (in module workbench.clients.help_client) (in module workbench.clients.log_meta_stream) (in module workbench.clients.pcap_bro_indexer) (in module workbench.clients.pcap_bro_raw) (in module workbench.clients.pcap_bro_urls) (in module workbench.clients.pcap_bro_view) (in module workbench.clients.pcap_meta) (in module workbench.clients.pcap_meta_indexer) (in module workbench.clients.pe_indexer) (in module workbench.clients.pe_peid) (in module workbench.clients.upload_dir) (in module workbench.clients.upload_file) (in module workbench.clients.upload_file_chunks) (in module workbench.clients.zip_file_extraction) (in module workbench.server.plugin_manager) (in module workbench.server.workbench_server) (in module workbench.workers.help_base) (in module workbench.workers.help_formatter) (in module workbench.workers.json_meta) (in module workbench.workers.log_meta) (in module workbench.workers.meta) (in module workbench.workers.meta_deep) (in module workbench.workers.pcap_bro) (in module workbench.workers.pcap_graph) (in module workbench.workers.pcap_http_graph) (in module workbench.workers.pe_classifier) (in module workbench.workers.pe_deep_sim) (in module workbench.workers.pe_features) (in module workbench.workers.pe_indicators) (in module workbench.workers.pe_peid) (in module workbench.workers.strings) (in module workbench.workers.swf_meta) (in module workbench.workers.unzip) (in module workbench.workers.url) (in module workbench.workers.view) (in module workbench.workers.view_customer) (in module workbench.workers.view_deep) (in module workbench.workers.view_log_meta) (in module workbench.workers.view_memory) (in module workbench.workers.view_memory_deep) (in module workbench.workers.view_pcap) (in module workbench.workers.view_pcap_deep) (in module workbench.workers.view_pdf) (in module workbench.workers.view_pdf_deep) (in module workbench.workers.view_pe) (in module workbench.workers.view_pe_deep) (in module workbench.workers.view_swf) (in module workbench.workers.view_swf_deep) (in module workbench.workers.view_zip) (in module workbench.workers.view_zip_deep) (in module workbench.workers.vt_query) (in module workbench.workers.yara_sigs)

test_worker() (workbench.server.workbench_server.WorkBench method) to_unicode() (workbench.server.data_store.DataStore method)

U

Unzip (class in workbench.workers.unzip)

URLS (class in workbench.workers.url)

V

validate() (workbench.server.plugin_manager.PluginManager method) version() (workbench.server.workbench_server.WorkBench method) View (class in workbench.workers.view) ViewCustomer (class in workbench.workers.view_customer) ViewDeep (class in workbench.workers.view_deep) ViewLogMeta (class in workbench.workers.view_log_meta) ViewMemory (class in workbench.workers.view_memory) ViewMemoryDeep (class in workbench.workers.view_memory_deep) ViewPcap (class in workbench.workers.view_pcap) ViewPcapDeep (class in workbench.workers.view_pcap_deep)

ViewPDF (class in workbench.workers.view_pdf) ViewPDFDeep (class in workbench.workers.view_pdf_deep) ViewPE (class in workbench.workers.view_pe) ViewPEDeep (class in workbench.workers.view_pe_deep) ViewSWF (class in workbench.workers.view_swf) ViewSWFDeep (class in workbench.workers.view_swf_deep) ViewZip (class in workbench.workers.view_zip) ViewZipDeep (class in workbench.workers.view_zip_deep) VTQuery (class in workbench.workers.vt_query)

W

weird_log_graph() (workbench.workers.pcap_graph.PcapGraph method) (workbench.workers.pcap_http_graph.PcapHTTPGraph method) work_request() (workbench.server.workbench_server.WorkBench method) WorkBench (class in workbench.server.workbench_server) workbench (module) workbench.clients (module) workbench.clients.client_helper (module) workbench.clients.customer_report (module) workbench.clients.help_client (module) workbench.clients.log_meta_stream (module) workbench.clients.pcap_bro_indexer (module) workbench.clients.pcap_bro_raw (module) workbench.clients.pcap_bro_urls (module) workbench.clients.pcap_bro_view (module) workbench.clients.pcap_meta (module) workbench.clients.pcap_meta_indexer (module) workbench.clients.pe_indexer (module) workbench.clients.pe_peid (module) workbench.clients.pe_sim_graph (module) workbench.clients.short_md5s (module) workbench.clients.upload_dir (module) workbench.clients.upload_file (module) workbench.clients.upload_file_chunks (module) workbench.clients.zip_file_extraction (module) WorkBench.DataNotFound workbench.server (module) workbench.server.bro (module) workbench.server.bro.bro_log_reader (module) workbench.server.data_store (module) workbench.server.dir_watcher (module) workbench.server.els_indexer (module) workbench.server.neo_db (module) workbench.server.plugin_manager (module) workbench.server.version (module) workbench.server.workbench_server (module) workbench.workers (module) workbench.workers.evel_knievel_all (module) workbench.workers.evel_knievel_key (module) workbench.workers.evel_knievel_type (module)

workbench.workers.help_base (module) workbench.workers.help_formatter (module) workbench.workers.json_meta (module) workbench.workers.log_meta (module) workbench.workers.meta (module) workbench.workers.meta_deep (module) workbench.workers.pcap_bro (module) workbench.workers.pcap_graph (module) workbench.workers.pcap_http_graph (module) workbench.workers.pe_classifier (module) workbench.workers.pe_deep_sim (module) workbench.workers.pe_features (module) workbench.workers.pe_indicators (module) workbench.workers.pe_peid (module) workbench.workers.rekall_adapter (module) workbench.workers.strings (module) workbench.workers.swf_meta (module) workbench.workers.unzip (module) workbench.workers.url (module) workbench.workers.view (module) workbench.workers.view_customer (module) workbench.workers.view_deep (module) workbench.workers.view_log_meta (module) workbench.workers.view_memory (module) workbench.workers.view_memory_deep (module) workbench.workers.view_pcap (module) workbench.workers.view_pcap_deep (module) workbench.workers.view_pdf (module) workbench.workers.view_pdf_deep (module) workbench.workers.view_pe (module) workbench.workers.view_pe_deep (module) workbench.workers.view_swf (module) workbench.workers.view_swf_deep (module) workbench.workers.view_zip (module) workbench.workers.view_zip_deep (module) workbench.workers.vt_query (module) workbench.workers.yara_sigs (module)

Y

YaraSigs (class in workbench.workers.yara_sigs)